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AMENDMENTS TO THE CLAIMS 

This listing of claims replaces all prior versions and listings of claims in the application: 

LISTING OF CLAIMS : 
1-6. (Cancelled) 

7. (Currently Amended) In a computer system including a host computer coupled to and 
separate from a nd-a storage system which has a first volume for storing data received from 
the host computer and a second volume that is a pair of said first volume and that stores data 
that is replicated from said first volume , and a storage control unit for controlling the data 
replication from the first volume to flnsaid Second volume that id the pair of said fir st volum e, 
a data protection apparatus coupled to and separate from t he host computer and the storage 
system, comprising: 

an event detection unit for detecting an event occurrence; m4 
a replication stopping unit for instructing said storage control unit to stop dat a the 
replication of data of from said first volume to said second volume that is the pair of said 
first Yolumo , when said event detection unit detects an event: and 

an illegal intrusion detection unit for detecting an illegal intrusion into said host 
computer; 
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wherein said event detection unit receives a detection of the illegal intrusion from said 
illegal intrusion detection unit; and 

when said event detection unit receives the detection of the illegal intrusion, said 
replication stopping unit instructs said storage control unit to stop data replication from said 
first volume to said second volume that is the pair of said first volume. 

8. (Cancelled) 

9. (Previously Presented) A data protection apparatus in a computer system 
according to Claim 7, wherein: 

said computer system further includes a computer virus detection unit for detecting a 
computer virus in said storage system; 

said event detection unit receives the detection of the computer virus from said 
computer virus detection unit; and 

when said event detection unit receives the detection of the computer virus, said 
replication stopping unit instructs said storage control unit to stop data replication from said 
first volume to said second volume that is the pair of said first volume. 

10. (Currently Amended) A data protection method for protecting data in a computer 
system including a host computer and -coupled to and separate from a storage system which 
has a first volume for storing data received from the host computer and a second volume that 
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is a pair of said first volume and that stores data that is replicated from said first volume, and 
a storage control unit coupled to and separat^from said storage system f or controlling data 
replication from said first volume to a-said second volume th a t ia a pai r o f said fir c t volum e, 
wherein said data protection method comprises steps of: 
detecting an intrusion into said host computer; and 

instructing said storage control unit to stop data replication from said first volume to 
said second volume th at is th e pair of - said first volum e,- when said intrusion is detected. 

1 1 . (Previously Presented) A program embodied on a storage medium that can be 
read by an information processing apparatus for making the information processing 
apparatus perform data protection in a computer system including a host computer coupled to 
and separate from a«d-a storage system which has a first volume for storing data received 
from the host computer and a second volume that is a pair of said first volume and that stores 
data that is replicated from said first volume , and a storage control unit coupled ancj 
separate from said storage system for controlling data replication from said first volume to a 
said second volume that io a pair of said first volumo , wherein said program makes said 
information processing apparatus perform processes of: 

detecting that an intrusion into the host computer has occurred; and 
instructing said storage control unit to stop data replication from said first volume to 
said second volume that is th e pair of said first volume, w hen said intrusion is detected. 
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12-13. (Cancelled) 



14. 



(Previously Presented) 



In a computer system including a host computer 



coupled to and separate from a ad-a storage system which has a first volume for storing data 
received from the host computer and a second volum e that is a pair of said first volume and 
that stores data that is replicated from said first volume , and a storage control unit coupled to 
and separate from said storage system for controlling data replication from the first volume to 
a-said second volume that is a pair of said first volume , a data protection apparatus coupled to 
and separate from the host computer and the storage apparatus comprising: 

an event detection unit for detecting an event occurrence; and 

a replication stopping unit for instructing said storage control unit to stop data 
replication from said first volume to said second volume th at is th e pair of said first volum e ^ 
when said event detection unit detects an event; 

wherein said computer system further comprises an alteration detection unit that reads 
given data in asaid plurality of said second r e plicat e d volumes to detect respective 
differences between the given data; and 

the event detected by said event detection unit is a detection result of the differences 
between the given data, with said detection result being received from said alteration 
detection unit. 
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15. (Currently Amended) A data protection apparatus in a computer system according to 
.Claim 14, wherein: 

write data to said first volume is replicated by said storage control unit to said second 
volume with a delay of a given time. 

16. (Currently Amended) A data protection apparatus in a computer system according to 
Claim 14, wherein: 

as said second volume, a plurality of second volumes are provided; and 
said storage control unit switches a replication destination of write data of said first 
volume, at given time intervals among said plurality of second volumes. 

17. (Currently Amended) A data protection apparatus in a computer system according to 
Claim 1 6 7 wherein: 

data replicated to said plurality of second volumes is further replicated to another 
plurality of sajd_second volumes. 



18. 



(Cancelled) 



19. 



(Previously Presented) 



A data protection apparatus in a computer system 



according to Claim 14, wherein: 
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said storage control unit further controls communication between said host computer 
and said first volume; and 

said data protection apparatus instructs said storage controller to stop communication 
between said host computer and said first storag e volume when said event detection unit 
detects said event. 

20. (Cancelled) 

2 1 . (deviously Presented) A data protection apparatus in a computer system according to 
Claim 7, wherein said replication stopping unit further instructs said storage control unit to 
cancel data replication from said first volume to said second volume. 

22. (Previously Presented) A data protection apparatus in a computer system according 
to Claim 7, further including a path disconnection unit for instructing said storage control unit 
to stop communication between said host computer and said storage system, when said event 
detection unit detects an event. 

23. (Previously Presented) A data protection method according to Claim 10, further 
including the step of instructing said storage control unit to cancel data replication from said 
first volume to said second volume that is the pair of said first volume, when said intrusion is 
detected 
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24. (Previously Presented) A data protection method according to Claim 10, further 
including the step of instructing said storage control unit to stop communication between said 
host computer and said storage system, when said when said intrusion is detected. 

25. (Previously Presented) A program embodied on a storage medium according to Claim 
1 1, further including said program making said information processing apparatus perform the 
process of instructing said storage control unit to cancel data replication from said first 
volume to said second volume that is the pair of said first volume, when said intrusion is 
detected 

26. (Previously Presented) A program embodied on a storage medium according to Claim 
1 1, further including said program making said information processing apparatus perform the 
process of instructing said storage control unit to stop communication between said host 
computer and said storage system, when said when said intrusion is detected. 

27. (Previously Presented) A data protection apparatus in a computer system according to 
Claim 14, wherein said replication stopping unit further instructs said storage control unit to 
cancel data replication from said first volume to said second volume. 
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28. (Previously Presented) A data protection apparatus in a computer system according 
to Claim 7 f further including a path disconnection unit for instructing said storage control unit 
to stop communication between said host computer and said storage system, when said event 
detection unit detects an event. 
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